Google Finds Vulnerability Disclosures Doubled as AI Changes Which Flaws Get Discovered

AI Agents Find RCE Vulnerabilities at Double the Traditional Rate—And Attackers Exploit Them in Days

Autonomous research agents are now identifying vulnerabilities that lead to remote code execution (RCE) at a rate of 50%, nearly double the 26% observed across the broader CVE ecosystem. This finding, detailed in the GTIG report published September 30, 2026, highlights a shift in how software flaws are surfaced and subsequently weaponized. The mechanics of […]

Google GTIG finds AI accelerating vulnerability discovery across enterprise and critical infrastructure attack surfaces

New data from Google Threat Intelligence Group (GTIG) found that artificial intelligence is changing the pace of vulnerability discovery and exploitation, with implications for enterprise and critical infrastructure attack surfaces. Vulnerability disclosures doubled from 5,045 in January 2026 to 10,740 in August, while the average number of vulnerabilities exploited each month increased from 10.5 in

Vulnerability disclosures are rocketing, but AI is changing the types of flaw being discovered

The number of vulnerability disclosures made each month has more than doubled since the start of the year, hitting 10,740 in August, according to Google Threat Intelligence Group (GTIG). The researchers also found the number of vulnerabilities being exploited is showing a similar trajectory. In 2025, the average was 10.5 exploits per month, this rose to 18 per month from January 2026 to August 2026. The researchers said they expect both these tr…

The vulnerabilities AI finds are the ones attackers want

Attackers exploited a flaw found by an AI research agent within four days of its public disclosure, and they are exploiting more vulnerabilities overall, according to new research by Google Threat Intelligence Group (GTIG). The researchers examined vulnerability disclosure and exploitation data from January 2025 to August 2026. Disclosures doubled, exploitation stays rare Monthly CVE disclosures doubled in 2026, from 5,045 in January to 10,740 i…

Google: AI Finding More Medium-Risk Flaws #AI - National Cyber Security Consulting

Exploitation Is Rising Faster Than Zero-Days as Attackers Accelerate N-Day Weaponization Emilia David • September 30, 2026     Image: ZikG/Shutterstock A sharp uptick in artificial intelligence-spotted vulnerabilities so far hasn't resulted in a corresponding explosion in hacking, Google says. AI is mostly identifying medium-risk flaws, the computing giant found in an analysis of disclosed […] Thank you for subscribing to our RSS feed!